Openatom vulnerabilities
165 vulnerabilities
Known vulnerabilities in Openatom products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Openharmony156 vulnerabilities
- Openeuler8 vulnerabilities
- Openeuler Kernel1 vulnerabilities
RoutineCVE-2025-6969openharmony +1 moreability_ability_runtime an improper input validation vulnerabilityin OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.CVSS5.5MediumEPSS0.15%RoutineCVE-2025-26474openharmony +1 morecommunication_ipc an improper input validation vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.CVSS3.3LowEPSS0.14%RoutineCVE-2025-52458openharmony +1 morearkcompiler_ets_runtime has an out-of-bounds write vulnerabilityin OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.17%RoutineCVE-2025-41432openharmony +1 morearkcompiler_ets_runtime has an out-of-bounds write vulnerabilityin OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.CVSS7.8HighEPSS0.18%RoutineCVE-2025-25277openharmony +1 morearkcompiler_ets_runtime has a type confusion vulnerabilityin OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.CVSS7.0HighEPSS0.16%RoutineCVE-2025-12736openharmony +1 moremultimedia_audio_standard has an insecure storage of sensitive information vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.CVSS6.5MediumEPSS0.17%RoutineCVE-2026-0639openharmony +1 moreliteos_a has a missing release of memory vulnerabilityin OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.CVSS5.5MediumEPSS0.16%RoutineCVE-2025-27562openharmony +1 morecommunication_dsoftbus has a missing release of memory vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-27128openharmony +1 moreliteos_a has an UAF vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.CVSS8.4HighEPSS0.16%RoutineCVE-2025-25212openharmony +1 morepasteboard has an improper input vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-24844openharmony +1 morecommunication_dsoftbus has a missing release of memory vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-27536openharmony +1 morearkcompiler_ets_runtime has a type confusion vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-26690openharmony +1 morecommunication dsoftbus has a NULL pointer vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-24925openharmony +1 moreapplications_settings has a missing release of memory vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-24298openharmony +1 moreliteos_a has an UAF vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.CVSS8.4HighEPSS0.16%RoutineCVE-2025-25278openharmony +1 moreliteos_a has a race condition vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.CVSS8.4HighEPSS0.12%RoutineCVE-2025-27577openharmony +1 moreliteos_a has a race condition vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.CVSS8.4HighEPSS0.11%RoutineCVE-2025-27247openharmony +1 morePasteboard has an improper preservation of permissions vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-27242openharmony +1 moreSsecurity_component_manager has an improper input vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.CVSS5.5MediumEPSS0.13%RoutineCVE-2025-27563openharmony +1 moresecurity_access_token has an improper preservation of permissions vulnerabilityin OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.CVSS5.5MediumEPSS0.13%